Make constants configurable

[joshlf]

Currently, we have a number of constants - such as the proof of work challenge's work factor, the token expiration period, etc - which are constants in the code. These should instead be runtime constants which are loaded from a config file, environment variable, etc.