#7 customer api desription and auth based on envvar