removed id/secret pair, only token is used to identify application