Add user wildcard matching for external auth

This is to add a fallback mechanism for external auth. If the user matches an entry in external_auth, that will be used. Otherwise the entry for '*' will be picked if available.