add client secret to settings