use key and secret from credential variables provided by broker instead of from the URI