feat(#80): server auth from environment variables