Implement mechanism allowing admin API actions without pre-existing user in database.
This key can be set by configuring the new master_api_key option in universe_wsgi.ini. Only set this if you have good reason (e.g. boostrapping galaxy programatically).
Allow user creation via API w/Galaxy auth.
Previously user creation only worked when used with external authentication.

Client code for testing available in blend4j: https://github.com/jmchilton/blend4j/commit/c3bc8cb782e8678956ce66563fc316a15d11862f.
Add API method allowing admins to generate API methods for users.
Moved some now common functionality between user web controller and user API controller into a new CreatesApiKeys mixin.

Client code for testing available in blend4j: https://github.com/jmchilton/blend4j/commit/c3bc8cb782e8678956ce66563fc316a15d11862f.
Do not allow deployer to use supplied example master_api_key.

Really good point by @martenson.

https://bitbucket.org/galaxy/galaxy-central/pull-request/251/api-enhancements-allowing-further/diff#comment-781496
Fix(?) poorly worded variable name (per @natefoo's suggestion).

Question mark added because I am not really sure I understand what this check (self.environ.get('is_api_request', False)) is all about, but like Nate said it doesn't matter functionally :).