Return the authentication strategy that was used during login

We'll want to make this comment a TODO, instructing to remove this in a later release.