added ApiKey authentication