make password case insensitive and move to env variables