Add npm badge
Allow to specify ref&accessToken server side

These values are read from the environment to be sure
nothing leaks to the browser.

This commit should resolves #8

Suggested-by: @mmoulton
Signed-off-by: Étienne Vallette d'Osia <evo@zengularity.com>