Converted auth.js to environmental variables to keep api details secret