Auth Token Binding to Hardware

Bind session tokens to specific device hardware identifiers to prevent session cloning.