Use env vars (for Heroku)
Tweak .gitignore for .env
Auth now uses template (with introductory blurb)