extern auth update