First attempt local auth, then try external provider