preparing for external auth