add exact steps for users to create an API KEY