Add client secret for rudimentary auth