fixing bug? and hiding api key