Split authentication strategy for front/admin