Don't encourage use of hard-coded credentials

* Update README to use `ENV` in example code