added api_key from http header