API key was public

And it was not a good idea at all
readme incomming