require authentication of local account before associating it with a remote identity