Add a few fixes that relates to the \Auth move.

More specifically, the API key controllers are referencing
the old users table directly and not the User model, and as such
had to be made aware of the new table