implement the request loader to allow authentication through an API_key stored into the User document