added logging and validation for client_id and api_key in the fake api