removed api key from product controller