removed hardcoded app secret