replaced hardcoded credentials with env variables