Added api_key into the allowed organization fields