added switch to ignore x-api-key for development