added invalid-secret view to help developers understand when they forget to update the app secret...