Did you ditch the API_SECRET for any particular reason? Seems like a bad idea to get rid of that and potentially expose everyone's data to the public.