moved sensitive data to env variables