use dotenv to mainain parity with prod env

Credentials now store insde a .env.* file