add support for using an apikey instead of user/pass