store username and password in ENV variables!