pre authorising/logging in a user from an external site