finalizing external authentication