3.16: correct issue when using api_key to auth