api, auth: Allowing getEnv calls with an app token