Http auth only from environment variables