Better client secret handling
Update readme