added API KEY to auth