strip API key when pasted