move API credentials and settings to config.py