Added Api Controller and implemented validateAccessToken Method to validate API access call from 3rd party apps.
Changed api/user_controller class that it validates access token before allowing apps to retrieve user data. Changed relevent routes.