Allow calls that originate from the API to bypass API Key