Improve security (modestly)
Hash API keys with bcrypt
Add basic input sanitization to authentication