Remove hard-coded API keys