password should be exported to environment