Add API key authentication