Update API_URL and API_KEY encrypted vars

Note: Used HTTP (not HTTPS) - if HTTPS is available we should use it.