make api key secure