Adding super basic authentication (hardcoded API_KEY which is terrible practice\!