Add guidance for handling multiple authentication methods

[mikekistler]

Some services allow a standard "bearer" authorization with user token but also API Key authorization. We should provide guidance on how this is done so we can get some consistency across Azure services.