Remove APP ID and Secret, don't want to get hijacked
Refactor auth related stuff