how to pass api key in header curl