allow api key to be sent