prompt for API key