added back saving secret

no persistent fitbit oauth thingy