enable api key

[DanRibbens]

When an auth collection is configured to useAPIKey, it is not compatible with disableLocaleStrategy. These two options should work independetly of one another so that you could have a collection that enables api keys, but does not have email and passwords.

The change needs to address the frontend and ensure that the API key authentication works on the backend still when disableLocaleStrategy is set to true.