moving credentials to environment variables