internal and external auth service setup