set auth_token to a generated UUID if AUTH_TOKEN not passed in ENV