using environment variable for db credentials