add api_key config

if ABF implements https with oauth credentials I will be a happy
    person.