ability for admin to create a new api key for a user