Read app id and secret from ENV aswell
Added protect method