change app secret to arguments