Fixed & in external auth source, thanks.