Check the API Key before processing postbacks

The Houdini API now includes the API Key, we should check it.