Deprecate looking for secret in req.secret