set env to heroku
401 on bad auth
add key registration