added api key authentication to each endpoint