fixed external authentication example