cleanup
add coverage script
allow environments override when creating an app
ensure app creation and token issuance works with no scope