move api_key form to profile