Removed clientId and clientSecret from config.yml. Moved to client script file to be returned during the getCredentials call.