Add note about where the clientId and clientSecret come from.