forgot to add a relationship in User for APIKey
Changed the user service to look more like the other endponts, and filled out get_users method to return a desensitised version of all the users
added a password field in the User model