allow external authentication