Add API key + access token auth.