use API key (defined in gitignored file), add TODOs