use dot env to manage secrets