Default to noop tokenManager and no backend secret

Signed-off-by: Nataliya Issayeva <nissayeva@users.noreply.github.com>

packages/create-app/templates/default-app/app-config.yaml.hbs

@@ -6,6 +6,10 @@ organization:
   name: My Company
 
 backend:
+  # Used for enabling authorization, secret is shared by all backend plugins
+  # See authenticate-api-requests.md in the contrib docs for information on the format
+  # authorization:
+  #  secret: ${BACKEND_SECRET}
   baseUrl: http://localhost:7000
   listen:
     port: 7000

packages/create-app/templates/default-app/packages/backend/src/index.ts

@@ -38,7 +38,7 @@ function makeCreateEnv(config: Config) {
 
   const cacheManager = CacheManager.fromConfig(config);
   const databaseManager = DatabaseManager.fromConfig(config);
-  const tokenManager = new ServerTokenManager(config);
+  const tokenManager = ServerTokenManager.noop();
 
   return (plugin: string): PluginEnvironment => {
     const logger = root.child({ type: 'plugin', plugin });