Extract token population method from Authenticate()
Remove redundant 'httpClient.Token = token' line
Remove JSON-parsing from token read method

The API URL has changed, so we'll never encounter a token file from the
old client.
Read API token from environment variable if present
`orchard proxy` can be given a URL to listen on