title: Validate API key before calling database
body: <p>When designing an API, is it worth validating the API key before checking the database to see whether or not the key is valid?</p>
  <p>For instance, the key could look like this: <code>key$hash</code></p>
  <p>If the <code>hash</code> doesn't match the <code>key</code>, one would know that the key is invalid from the get-go.</p>