#62: generate API key as part of site creation