hardcode app_id and secret