removed format (we'll use only json) and added API secret configuration