add authentication using api_key params