Add API Nonce model

- Allow nonces to be claimed (only once)
- Return a valid API key upon claim