enabled key auth for custom_field actions
added changelog for #2708 fix