Add preferred IDP list to `AuthenticateMachine`

[lem-onade]

If a found provider matches one of the preferred list, it should be selected automatically without user input.

┆Issue is synchronized with this Wrike task by Unito