Remove "my secret" from auth