get client secret from environment