changed auth header from api-key to api_key