Include client_id and client_secret in auth request