change database to use environment variable so password is not available on github