updated to configure client_secret