Change your app secret ASAP, you shouldn't include private info in these questions
Then, check the advanced settings of your app and make app type is set to 'Web', not to 'native/desktop' - if it's set to native/desktop the app secret isn't trusted and calls which need an app access token will fail.