API Token not valid in validateApiKey()