Using hardware token as a secondary aspect