Add note about API key in readme