added check for a blank PEER_TOKEN environment variable, which will save us from ourselves if we forget to set it, since it will default to denying access to every request