remove api key and user id