If appsecret_proof param is sent in code, do not override in sdk

If one app manages other apps, it needs to be able to send the other apps' secrets, not its own. Without this override, that was impossible, as the appsecret_proof parameter in code was being overwritten here.