Explicitly name auth, fix bug on local auth

Explicitly name the strategies as 'local' and 'oauth2' so that it is
clear which one is being called.

There was a bug in local auth when the form was simplified; need to add
back in the name= fields in the html template.  Explicitly post to
/auth/local and not the relative 'local' URL.