check server-key on every request server gets