Allow private key to be read inside the model

fix typo

try to fix public key mutability issue

Make public_key protected to be writable for once

Enhance Model to be easily testable

update hashing compare method to Timing attack safe string comparison

Fix typo in query

Fix many typos and increase private conservative

Enhance migration to delete old api_keys table

Be more conservative about private_keys