move email credentials to environment variables