Secret is not required for opro/oauth/auth#new

It's *secret* after all