Move authentication to environment vars, and add default ones when running with php server