add api_key to user