move api keys to the config file