remove old auth secret, invalidated
Merge remote-tracking branch 'origin/master'