added AppSecret proof