was passing client id but using api key