Allow both types of authentication