replaced session with apikey