valid appkey and appsecret