Allow authentication to be turned off

Allow authentication to be turned off with an environment variable. In
development it is convenient to be able to access the API without having
to provide a bearer token on each request.