Expose client_secret so it can it be used in client' application
Ignore swp files
Put refresh token togheter with access token as required
Add site column to clients