support for upstream secret key login