testing APIKeyResource and endpoint