Skip DB authentication

I've added a new ENV variable - `ERNEST_ALLOWED_KEYS`, basically a comma seperated list of keys, so we can skip DB calls when authenticating. Need to add this to Heroku (which I'll do now), but then we can crack on.