client secret var