Constructor for low privilege (no clientSecret) api access.