Use env variables for passwords

This makes automation easier and assigns meaningful names to passwords.