added user calls and fixed key/secret headers