get user/password from env