add .env file and test secret API keys