removed sessions and added env for username and password