I am not a hundred percent sure if it's a SteemConncet issue or a Dapp issue that has coded it like it. What happens when the authentication token gets generated, they were storing that token. Now the issue is, if someone will have access to that system can get all the tokens which will be a security lapse.