replayed password plaintext with environment var
created api GET endpoints and means to access them with services