moved uuid checking to the api key model