move the auth password into an ENV variable