caching for apikey checks