existing users can use external login