use environment vars for oAuth settings