add password as env variable