Fix auth. Document externalauth. Closes #27.