Refactors api_key to be able to find User using a token