added external authentication