add client_secret to the login page

refer to bbs_dev 202