take out client_id/secret