Fix oauth req by using client_secret.