Add API_KEY as auth param too