Fix #13 Remove client secret requirement as it may be null for some flows