auth key generate and get and check