added AppSecret proof

[Fixes #14]