Security update, move api key to environment variables