issue #37 maximum of 5 API keys per user and ability to delete keys