updated the application to remove client id and secret from the config and accept as params
adding register to server.js
changing client secret to be a password field