use environment variables for username and password