* remove auth for plain API keys * move condition to validateApiKey() * fix typo * remove GetApiKeyById() method