accept user auth via SRC_UID and SRC_KEY env vars