Load config from a .env. Add in token-based auth. Re-write load-images.js to use new API interface, instead of accessing models directly.