authenticating user ids, hit app from external url
merging