documentation of auth and secret-token environment variables