remove appId, shared secret