got the app and user key the wrong way round