implemented and tested api key authentication