remove the API key from the request so it isn't saved

For #612