Allow key-based access for API calls

3rd party Stash integrations (such as the TeamCity plugin), require password authentication to integrate for example to update build statuses. Stash should support more secure authentication methods for the API.