Remove clientSecret required in JS lib, and removed storing token to sessionStore