perform authz validation for external services

Created by: nicksnyder

part of https://github.com/sourcegraph/sourcegraph/issues/914#issuecomment-440067022