read credentials from ENV