Omit client_secret from the authorization url. Fixes #39
Merge pull request #58 from 13k/master

Omit client_secret from the authorization url