fixes #2355 implement API key management system

- Added API key get, creation, editing, and revocation methods.

- Updated the profile template to include API key management features.

- Updated the database schema to support the new API key system, including additional fields for key management.

- Added client-side JavaScript functionality to handle API key operations and display responses.

- Update tools/htm.ws with the new way to authenticate.

- Restriction of certain api methods when used with an api key

- Backward compatibility with older apps

include/functions_session.inc.php

@@ -153,6 +153,13 @@ SELECT data
  */
 function pwg_session_write($session_id, $data)
 {
+  // when the request is authenticated via api_key (PWG_API_KEY_REQUEST),
+  // you do not want the session to be written to the database (no user session persistence)
+  // this avoids polluting the session table with stateless API accesses
+  if (defined('PWG_API_KEY_REQUEST'))
+  {
+    return true;
+  }
   $query = '
 REPLACE INTO '.SESSIONS_TABLE.'
   (id,data,expiration)