Make AUTH_TOKEN configureable via env.