set up environment variables locally and on server to protect sensitive information