Return the authentication strategy that was used during login

Should we toss `'oauth'` into `AuthenticationConstants.providers`?