Redid account settings page; implemented API key validation; refactored controller (again); misc. changes