authentication using environment variables