Remove api key from direct access, need to figure out how to deploy