check if user, token and secret are being passed to API