access token and api key to env, resolve #2