removed id/secret configuration. identification is done only by token (secret)