Revert "testing oauth without session secret"

This reverts commit ef5aa01bb6f3f2532097ed2f84e0b5c742db9749.