switched GetLocations over to use GetCustomerUserFromKey (no auth key)"