Use NOT_CRAN env var
Allow storage of arbitrary additional urls in endpoint
Start on supporting more token methods