moved APPID and APPSECRET to environment variables