added api_key on users, other changes regarding hosting api