fetch username/password from env vars