moved user, password to env