fixed client_id and client_secret