Add support for resetting a user's API key

Fixes #436