users are saved in the database and their apiKey is saved to the keychain