setup api key handling before ignoring config.php
ignore config.php to not reveal api_key to public