add secure login information

pull username and password from heroku environment variables