Force password confirmation through the web UI
Display if user has API access in users list
Add users' last seen date
Return a blank string as User#seen_on value so it is represented in any API response
Add /api/users/random_token endpoint