remove api_key assignment on card_hash generation