remove second instance of hard-coded API key