env vars for setting credentials