now verify api key. again. very safe