PLFM-2372 - More auth revisions

Auth filter should check ToU for API key calls too, now that the boolean can be in any of the 3 states (before, you could only possess an API key if the ToU was True).  

This pull also addresses a few EmptyResultDataAccessExceptions Bruce was hitting when try to authenticate non-individuals.  Now the Auth DAO properly throws NotFoundExceptions.  (Before it assumed that the caller of the DAO would only pass in individuals, which are expected to have credentials).