Use ENV variables for passwords

Merge request reports