Still overridable with USERMETRICS_NO_AUTH if desired.
USERMETRICS_NO_AUTH
Closes #8.
CC @sunweaver @peat-psuwit