Fixed API_KEY authorization check