PLFM-2372 - More Auth Revisions

Auth filter should check ToU for API key calls too, now that the boolean can be in any of the 3 states (before, you could only possess an API key if the ToU was True).

This pull also addresses a few EmptyResultDataAccessExceptions Bruce was hitting when try to authenticate non-individuals. Now the Auth DAO properly throws NotFoundExceptions. (Before it assumed that the caller of the DAO would only pass in individuals, which are expected to have credentials).