do less validation of API key
also clear the current session when clearing preferences
add a little hint about a forbidden key
calculate a drift between server time and client time
apply server time drift to countdowns

fix issue #25
Merge branch 'feature/drift' into develop