Separate Developer and User models

Only developers can own ApiKeys, it's not very polished yet but this fixes #14.