diff --git a/deployment/order-manager.yaml b/deployment/persist.yaml
similarity index 97%
rename from deployment/order-manager.yaml
rename to deployment/persist.yaml
index 2feca99..62f66fe 100644
--- a/deployment/order-manager.yaml
+++ b/deployment/persist.yaml
@@ -66,6 +66,8 @@ spec:
                   fieldPath: status.podIP
             - name: AMQP_URL
               value: "amqp://admin:12bananer@rabbitmq:5672/"
+            - name: API_KEY
+              value: "ApiKey: randomslask2000"
             - name: POD_NAME
               valueFrom:
                 fieldRef:
diff --git a/main.go b/main.go
index 6589363..5c352ee 100644
--- a/main.go
+++ b/main.go
@@ -158,7 +158,7 @@ func main() {
 	mux := http.NewServeMux()
 	mux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
 		pth, fileName := GetPathAndFileFromUrl(r.URL)
-		log.Printf("Request path parts: %+v, fileName:%s", pth, fileName)
+		log.Printf("Request: %+v, fileName:%s, method: %s", pth, fileName, r.Method)
 		folder, err := app.GetOrSpawn(pth)
 		if err != nil {
 			if err != nil {
@@ -167,8 +167,12 @@ func main() {
 				return
 			}
 		}
-		log.Printf("Retrieved folder: %+v, exists: %v", folder)
 		if fileName == "" {
+			authKey := r.Header.Get("Authorization")
+			if authKey != apiKey {
+				w.WriteHeader(http.StatusUnauthorized)
+				return
+			}
 			content, err := folder.Storage.List("")
 			if err != nil {
 				w.WriteHeader(http.StatusInternalServerError)
@@ -200,6 +204,7 @@ func main() {
 				if err != nil {
 					w.WriteHeader(http.StatusInternalServerError)
 					w.Write([]byte(err.Error()))
+					return
 				}
 				folder.Storage.Put(fileName, data)
 				w.WriteHeader(http.StatusCreated)