converted to api key auth