Use an API secret to communicate with Janus

This way Janus will reject any request which doesn't have a matching API secret
included. This provides a security mechanism against unauthorized resource
access in case Janus is listening on a public interface.