external authentication -> revoke consent

[Cantor, Scott]

> AuthenticationEngine.returnToAuthenticationEngine(httpRequest,
> httpResponse);

That's simply not valid. That's a V2 thing.

-- Scott