ApiKey and ApiSecret are private in Session