SSP-1750 Fall back to external_person.username lookup after school_id

Also allow external_person.school_id to override person.school_id even
if the former is non-null.