To confirm token authentication when already connected, it could be interesting to add local authentication layer (eg biometry) when available