taking in api user and secret