[Fixes #43880485] Client secret is saved in the session between calls