add support for secret tokens
add superuser credentials based on ENV vars