Moved the access key check to the action method