alpha version of appsecret_proof, needs test