make api key and oauth token strings different

avoid confusion of making people think this should be the same value