fix(auth): Use configuration from environment (instead of hard-coded default)