If your website loads as http://mysite.com, keys & secrets must also be http://mysite.com without www