added parameters (user_key and app_token) check