store password as env var
store password as env var