Adding API key based access control