remove console.log
use env variables for api key and secret