api key management and validation implemented