moved secret into config file
auth progress