It's posible to use two authenticate user behaviors, but honestly, user level authentication is the better way to go.
If you wheres to use 2 user authenticate behaviors, you would need to make sure the session names created by each was unique, and you will need to create rules for each of the unique session names.