remove passing auth token via env var