fix to instructions for callback url on secret change.