allow a password to be specified via environment vars