add support of apiKey authorization