diff --git a/backend/app.js b/backend/app.js
index e14efe4..a8a7c82 100644
--- a/backend/app.js
+++ b/backend/app.js
@@ -1246,9 +1246,9 @@ app.use(function(req, res, next) {
 app.use(function(req, res, next) {  
     if (!req.path.includes('/api/')) {
         next();
-    } else if (req.headers.authorization === admin_token) {
+    } else if (req.query.apiKey === admin_token) {
         next();
-    } else if (req.headers.authorization && config_api.getConfigItem('ytdl_use_api_key') && req.headers.authorization === config_api.getConfigItem('ytdl_api_key')) {
+    } else if (req.query.apiKey && config_api.getConfigItem('ytdl_use_api_key') && req.query.apiKey === config_api.getConfigItem('ytdl_api_key')) {
         next();
     } else if (req.path.includes('/api/video/') || req.path.includes('/api/audio/')) {
         next();
diff --git a/src/app/posts.services.ts b/src/app/posts.services.ts
index 53ec330..8aa05d1 100644
--- a/src/app/posts.services.ts
+++ b/src/app/posts.services.ts
@@ -1,5 +1,5 @@
 import {Injectable, isDevMode, Inject} from '@angular/core';
-import { HttpClient, HttpHeaders } from '@angular/common/http';
+import { HttpClient, HttpParams } from '@angular/common/http';
 import 'rxjs/add/operator/map';
 import 'rxjs/add/operator/map';
 import 'rxjs/add/operator/catch';
@@ -36,8 +36,8 @@ export class PostsService {
         }
 
         this.httpOptions = {
-            headers: new HttpHeaders({
-              'Authorization': '4241b401-7236-493e-92b5-b72696b9d853'
+            params: new HttpParams({
+              fromString: `apiKey=${this.auth_token}`
             }),
         };
     }