changing the api key on each login