remove client_secret from repository