The description here is a bit confusing -- you say "set...but no appsecret set", but I'm not sure what's set if the appsecret isn't set. Probably just a typo?