moved api key out of script