hack in order to avoid `Invalid appsecret_proof provided in the API argument`