removed hard-coded app secret and corrected the URL's