add api_key (for User::findIdentityByAccessToken)
update AutoTimestamp to TimestampBehavior
update components/User::afterLogin()