return key and secret in response