Set secured client secret and refresh token vars correctly

These were previously set to empty values