Use `key` param in favor of `password`
Validate uniqueness of cryptograph lookup value
Add API Key model

- Stores a user-defined value and generated token
Add basic session capabilities to API

- Require valid API key to be present for lock/unlock calls
- Return friendly success values in JSON