add proof of appsecret param to API calls
Merge pull request #440 from niallkennedy/appsecret-proof

add proof of appsecret param to API calls