Public apps should not use / require a client secret

[rfleschenberg]

django-oauth-toolkit generates a client secret even for apps with client type "public". It would be better to not do this, as per https://www.oauth.com/oauth2-servers/client-registration/client-id-secret/

[manhtai]

It's generated but you don't need too use it though.