Allow app/key to be set via subdomains

[jessepinho]

• Should be configured in the server call to backstage()
• Set the app and key on the req object to be passed down through middlewares.