don't set ``client_secret`` request parameter if self.secret is nil