Change api_key from GET param to header