require valid apikeys