add api_key field to Users
add User->make_new_api_key