getUserByClientIdAndClientSecret