Without the auto login and remember me, then you would just have the authenticate server behavior applied twice. Once authenticating based on email and password, and once based on phone number and password. If you run the wizard for the email and password scenario, then you can apply the second server behavior for phone number and password.