If key specified in request params, do not use auth apiKey