removed hard coded appSecret