update to use env for sensitive data (like database credentials, secret keys) etc.
EMAIL_PASSWORD take also from ENV