add an apikey checker, maybe this is perfectionnable but it actually works.