- added ApiAuthorize based on application token
- added list of applications to user
- changed primary keys from "Key" to "Id"