Removed the client secret from repo (and generated a new one). Thanks for the heads up @mookid8000 :)