Standardize the way that API errors are reported.
Authenticate off of env vars for now.