adding /key/* and /report/* api handlers

For full support we need to extend the ApiKey model and generate an ssh key per api key.