clean up controllers; add API KEY for testing purposes