Add .env and make associated changes

[ccelest1]

To Be Completed

• Using .env to obscure urls, other privacy related, hosts, etc.
  • Docker image (allow for /token or other urls to be encoded i.e ${process.env.server}/token)
  • add allow_origins=[os.environ.get("CORS_HOST", "http://localhost:3000/")]
  • Hiding Signing, Secret Keys