configured for dev to skip x-api-key