drop app_key and app_secret