Security Lockdown

[ZempTime]

• swap out current hardcoded vars to env vars
• introduce ability to type in where requests should go
• access via specific read-only user by default
• figure out how to handle the need for couchdb endpoint to be https

continuing thread opened in #3