ISSUE#370. Need to check apikey user, not user.