test that external auth redirects to appropriate host