Cleaner implementation of setting API_KEY when request doesn't need authorisation