make site pasword and secret token environment variables