move password to env
Merge pull request #1 from davidmh/master

move password to env