Closes #5 (#7)

* Added an option to remove authentication

* Updated README to document disabling authentication

Co-authored-by: Przemek Dragańczuk <admin@draganczuk.tk>

src/main/java/tk/draganczuk/url/App.java

@@ -21,7 +21,7 @@ public class App {
 		after(Filters::addGZIP);
 
 		// No need to auth in dev
-		if (System.getenv("dev") == null) {
+		if (System.getenv("dev") == null && Utils.isPasswordEnabled()) {
 			// Authenticate
 			before("/api/*", Filters.createAuthFilter());
 		}

src/main/java/tk/draganczuk/url/Utils.java

@@ -27,4 +27,14 @@ public class Utils {
 		return PATTERN.matcher(shortUrl)
 				.matches();
 	}
+
+	public static boolean isPasswordEnabled(){
+		String disablePasswordEnv = System.getenv("INSECURE_DISABLE_PASSWORD");
+
+		if(disablePasswordEnv != null && disablePasswordEnv.equals("I_KNOW_ITS_BAD")){
+			return false;
+		}
+
+		return true;
+	}
 }