Distinguishing an external user from an internal user in OneDrive Securlet