intercept all request, add check for wpapikey