check for client_secret presence, fixes #53