passing anonymousAccessToken in authorizeExternallyAuthenticated