Add API key to users

[jovandeginste]

• the API access can be enabled or disabled per user, by the user
• the API key can be regenerated
• the API itself is not yet usable (no actions available)