external auth
changing auth to single point