store client secret hashed