updated secrets to use environment variables