add api authentication via api key