load credentials from env vars