* FIX: make sure long API keys are sent via the POST body
  * this wasn't the case in 3.24.8 because of a typo