read settings from environment rather than source code

Replace credentials in source code with references to environment variables.

Will explain using them in the readme, which will be another pull request.