change to public URLs and set id/secret/token to empty