switched from secret config to env variables
added dependencies to package.json