externalize auth provider URL