remove clientSecret
add getDelegationToken method