Removed hardcoded auth tokens and api keys from everything. Added support for env variables and config files for persisting credentials