Add api_key to user safe_params.