added .env for security, regenerated tokens