clarifying API key usage in README