let's put the credentials in environment variables so they're not in the repository