While a customer's first login from a new device — the moment when they connect the device to their account and confirm they really are who they say they are — sets the tone for how banks approach security, in-app authentication is equally make or.