replace api key, closes #4