check for client secret