remove shared-secret-in-url