use env variables for tokens etc

...to facilitate Heroku deployment. (issue #90)