demo: Allow specifying api key + secret
Fix setup of auth details

Caused 403's as the apikey/secret was never found in db
Fix base url not correct when using local cache

Also add env-var IMGFLO_CACHE for specifying cache type