using environment variables on heroku to improve security. added models