Add fallback to dialback if EXTERNAL authentication fails due to practical experience.
Implementation Note: If Server2 needs to assign an authorization identity during SASL negotiation, it SHOULD use the value of the 'from' attribute of the stream header sent by Server1.
Else Server2 SHOULD return a ¬authorized; stream error and close the stream.
+Else Server2 SHOULD return a ¬authorized; error and either close Server1's TCP connection or continue with a Server Dialback (XEP-0220) [8] negotiation.