Remove mandatory API_KEY for an unsigned upload

Because unsigned upload doesn't require any api_key, the check is useless in this case.