updated the api key, removed the auth token from the url variable as it was not needed