read credentials from env variables