make it possible to pass rpc auth using SERF_RPC_AUTH

let the user be able to pass rpc auth using an environment variable (`SERF_RPC_AUTH`) so the secret won't be exposed to someone checking out the process table