use app key/secret from config