use your own client secrets