renamed authString -> apiKey