use api_key/api_secret instead of digest auth