looks up an environment variable and returns the var or a fallback.

A stupid simple middleware that checks that a request has a Authorization: Basic $SECRET header.