external auth code changes

extauth readme