Should we really save the client_secret .. let us think about it