Don't require authorization if API key is empty