for local auth test, pass `local` param correctly