Ensure either credentials or PIN are required for resetting session token.