removed api key from server.js