Log API requests against the User who made them

[symroe]

• For authenticated requests, log the user, time, and the endpoint1
• Logs should live in the database, but consider caching locally before persisting to the database to speed up response time