Improvements and testing:
- Check if key has not expired
- Return 403 if key does not have the required permission or does not belong to group
- Add custom managers, with useful methods, to Key and Consumer model
- Add tests