Restfull API security and preformance

Restfull API security and preformance

I want to create RestFull API.
I have:
1) Linux Server
Type of my application.
Application like blog platform with user Authorization and Roles. I want
to use AngularJS here and create SPA.
1) What technology will be the best for me for API?
PHP + MYSQL
NODE.JS + MongoDb
other?
2) How to make user Authorization in API?
With way will be good? 1) Every user have a API key stored in Database. In
every call to API userd send his API key. On the server side key is
checked in Database. 2) User using login to API command and API started
the Session.