initially able to obtain bearer token, keys stripped out temporarily
placed credentials in env variables