If you're integrating Piano into your mobile app, you will need to have a look at how to do that here.
When passing the user token via the PianoShowTemplateController, for example via the following method:
self?.showTemplateViewController?.reloadWithToken(userToken: token)
You will need to add the following JavaScript to your Composer initialization to verify the user token correctly:
PianoComposer(aid: "<AID>", endpointUrl: "https://sandbox.piano.io")