Check the API Key before processing postbacks

The Houdini API now includes the API Key in postbacks, we should check it.