Auth: Check token before password and certificate because of some certificate bug