added support for API access key authorization