Updated auth to allow multiple backends with fall-through, e.g. LDAP then MDB2