moved all auth credentials to ENV; SMART huh!