add heroku password to .env file