remove api_key auth, to use basic auth