public function authenticate($user, $request, $response)
 {
     $apiKey = $request->get('api_key');
     if (!is_null($apiKey)) {
         $_GET[$this->tokenParam] = $apiKey;
     }
     return parent::authenticate($user, $request, $response);
 }