added dot env to protect passwords and secret token