authenticateWithExternalURL made to work with session auth type only