Changing mapping to rely on site instead of API key

Tender mapping is now done against the tender site instead of the tender
api token as the api token is per user instead of per org / site and
will break when more than one user goes to edit the mapped components.

The after auth flow has been updated to make sure that the user with the
provided api key has access to the site before performing the mapping.