What is app secret in step 2 of authentication flow? Is it the `Secret Id:`?