Secure authentication and identity verification in a single mobile app