Generating unique API Token on user creation.

In order to allow API requests each user needs a token. Now indexing
on `api_token` and making sure each user has a unique one.