also use env for password in server