added token secret to OAuthAwareExceptionInterface