use env vars for creds