Remove api key property from payload and added validation