add mandrill settings and .env to manage passwords