appkey: verification