Pull AUTH_TOKEN from ENV.

If not then use SecureRandom as a fallback. https://github.com/Shopify/dashing/pull/247/files