move rotten_api_key to .env and db_url env testing