cleanup for basic api token system
fixed the logged querystring to show up better in the api logs
record user along with api request
changes to api