Require dni on token validation to prevent sms key theft