remove clientSecret