Cleanup

[bhudgens]

• Shuffle the vars around
• Require JWT_EXPIRATION_IN_SECONDS if SECURITY_MODE=jwt
• Var rename