pass api_key params from articles crud and make it access or deny with parent base controller