Use auth_merge_strategy on new users in case someone signs up twice