update auth_token with env
fix typo
use scope_composer and bump to initial release