User now has an associated API key, created automatically on account registration.
Added test for auto-generated user API token