set auth_token to a generated UUID if AUTH_TOKEN not passed in ENV
downcase 'securerandom'

`require 'SecureRandom'` works on my OS X dev machine, but not on my linux deploy box. `require 'securerandom'` works on both.