is the problem that you dont want to use the master_key to test? if not you can generate a key for your user using the api as well