Clean up application config a little.
Simply use ENV for configuration for now.
Allow DRAGONFLY_SECRET and API_TOKEN_SECRET to re-use SECRET_KEY_BASE.
Add an initializer to check for the presence of required ENV vars