Remove mandatory API_KEY for an unsigned upload