Updated http auth to read from system ENV instead of auth.json to make deployment more secure.