Moved apiKey from the querystring to an http header