Add "key" and "base_key" validation when loading

[KalobTaulien]

Every API key starts with key and every base key starts with app. We should have validation for that so people know they're putting in the right values.