turns out that the method getUserRolesForUser() is obsolete after all. "Weg damit!"
removed obsolete method getByAPIKey().
updated query builder in method changeAPIKey with correct table/column names.
renamed/camelCased controller actions.
moved the get/create api token controller actions into the calendar controller since this is functionality not shared outside of calendar/dashboard.
created new method for retrieving an API token by user id, then rigged it up to the getApiKey action.
renamed method changeAPIKey to changeApiKey for consistency reasons.