Better (more secure) Authorization

[StevenSavold]

I want to be able to get rid of (at the very least) the password configuration. It should be using a better authorization method instead of needing a plaintext password for harvest.

While the cockify api key is a better start, then harvests username/password. Maybe there is a better way of specifying it instead of through a environment variable.