setup env variables
fixed user authentication and authorization