adds unique constraint on api_keys.access_token