the very first time the app starts on a device, the token and its secret are empty. so the auth process was not triggered.

once they are saved, the user does not need to be authenticated again.

(unless there is a logout button in the app, which would just put those two on empty again :) )