use environmental variables to hold tokens