added dotenv for sensitive data