Reverted to old method of api_key input

It worked just fine, and still preserved security.