Requires authentication for the initial purchase, and fails for subsequent payments (including off-session ones) with an authentication