hide raw api call and key on search.php