moved out admin password to env var