get api_key from cookie