add ENV variables to protect SMTP credentials