[master] work on user/apikey model. setting up specs