remove unneeded api param, add new key to use for secret api