How do you handle authentication state and secure token storage across app launches and background states?