fixed issue with x-api-key check