additional documentation to explain x-api-key logic