implementing ClientSecret authentication