Allow authentication by api_key