removed client secret from config.php