external authentication API