apiKey validation