Moved api key to metadata and out of OAuth activity.