fix auth error
add checklist
make app key secret