Move generic ApiRoutes to a whitelisted routeprovider file

resources/assets/js/cachet.js

@@ -16,9 +16,6 @@ $(function () {
         beforeSend: function (xhr) {
             xhr.setRequestHeader('Accept', 'application/json');
             // xhr.setRequestHeader('Content-Type', 'application/json; charset=utf-8');
-          if (typeof window.apiKey !== 'undefined') {
-            xhr.setRequestHeader('X-Cachet-Token', window.apiKey);
-          }
         },
         statusCode: {
             401: function () {

resources/views/layout/dashboard.blade.php

@@ -62,7 +62,4 @@
 </body>
 @yield('js')
 <script src="{{ mix('dist/js/all.js') }}"></script>
-<script type="text/javascript">
-    window.apiKey = "{{ auth()->user()->api_key }}";
-</script>
 </html>