external authentication.js