But the API key is sent in the URL fragment, which isn't seen serverside, so how am I supposed to overcome that issue?
