fixed oauth secret key setting