docker-ize

Enable loading config from env vars (more PaaS/Docker-y).
Don't exit without API keys in local dev.
Match more loosely on ports since env vars are all strings.
Clean up dev and prod deps.
A bit more error checking on auth finish.