use a config module to store api credentials