Ok so we should probably have valid values for apiKey and apiSecret that can be share in the source code but cannot actually handle real call to tokBox.