replaced requiring the now-removed base_authentication_controller with another appropriate base controller script.
added method for retrieving a user record by api token.
renamed method getEnabledUsersById() to the more fitting getEnabledUserById(). corrected return value in case of non-match.