diff --git a/app/controllers/api_controller.rb b/app/controllers/api_controller.rb
index 61e27a153..a46369d27 100644
--- a/app/controllers/api_controller.rb
+++ b/app/controllers/api_controller.rb
@@ -169,6 +169,7 @@ def require_api_key
       return if @current_api_key
     end
 
+    # TODO: Show different errors for when a key has been disabled and when it has expired
     render_error("not authorised - use a valid api key", :unauthorized)
   end