[CAL] +: configuration for selecting the user that is used for local session

After the user is remotely authenticated we use the selected user as a base
to create a local session.