added API Key auth for REST api endpoints