working on server-side item sanitization
shorter api key