switches to using environment variables for secrets