How to enforce API calls are coming from authorized site
<p>What is it that I need to do (what request parameter) do I need to check to make sure that someone calling my API is indeed the domain associated with that key, and that they key isn't being used on multiple domains? </p>
