password env variable should not be md5 encrypted