[security] ensure session is only for that request when authenticating user API key

https://github.com/pterodactyl/panel/security/advisories/GHSA-7v3x-h7r2-34jv

app/Http/Middleware/Api/AuthenticateKey.php

@@ -70,7 +70,7 @@ class AuthenticateKey
         } else {
             $model = $this->authenticateApiKey($request->bearerToken(), $keyType);
 
-            $this->auth->guard()->loginUsingId($model->user_id);
+            $this->auth->guard()->onceUsingId($model->user_id);
         }
 
         $request->attributes->set('api_key', $model);