How would you implement a login in android?
<p>Notice that I've read several posts and I'm still wondering the same, because I'm trying to fulfit this points:</p>

<ul>
<li>Login once, "remember forever" until logoff</li>
<li>Avoid sending password frequently</li>
<li>Create something like a token.</li>
</ul>

<p>So here's my main question:
Token is generated randomly, right? So imagine someone uses wireshark and reads this token. Then extranger can use this token faking himself as the real user.</p>

<p>How can I control that?</p>

<p>Thought about sending IMEI and hashing it with token, but it's kinda the same, IMEI can be faked. Thought about sending IP, but if user switches from 3G to Wifi, token would crash, and I dont want that.</p>
