introduce a configurable auth user; switch over to environ

Realized that I hadn't allow for a custom auth user.