dual local strategy and oauth2 strategy