use env vars for api keys