read credentials from environment variables