add back in api key check