Minor fixes + implemented usage of expires on apikey
Added bruteforce protection.