db auth now set through env vars