now client_secret is shown on app detail page