feat: add the ability to create and maintain API keys

[brent-hoover]

Remembering that a JS client will not be the only consumer, we need a way for other applications to connect to our app and get and write information without having to obtain a token