pam: Pick the device with more enrolled finger prints

When multiple devices are available PAM module will just pick the first one, even if it has not enrolled fingers.

Since this can't be user configured (yet) we can be a bit smarter and select the device that has more fingerprints configured for the user.