Permit access token param for api key in admin panel