API-key allowed as either GET og POST var