api key + change to http