check api key expiry during validation