extracted login methods into separate module and hid API key in env file