Core: only try local auth if a user has the "database" auth provider set