moved credentials to environment variables