set up secret api variables