rails secret is now stored as an environment variable
use env variables for username/password