diff --git a/app/app.py b/app/app.py
index 6561360..edc45dd 100644
--- a/app/app.py
+++ b/app/app.py
@@ -811,7 +811,7 @@ def create_app(args):
         )
 
     @app.route("/suggest", methods=["POST"])
-    @limiter.exempt
+    @access_check
     def suggest():
         """
         Submit a suggestion to improve a translation
diff --git a/app/static/js/app.js b/app/static/js/app.js
index f292fb6..5f59ee8 100644
--- a/app/static/js/app.js
+++ b/app/static/js/app.js
@@ -290,6 +290,7 @@ document.addEventListener('DOMContentLoaded', function(){
                 data.append("s", self.translatedText);
                 data.append("source", self.sourceLang);
                 data.append("target", self.targetLang);
+                data.append("api_key", localStorage.getItem("api_key") || "");
 
                 request.open('POST', BaseUrl + '/suggest', true);
                 request.onload = function() {