Login flaw
Entering the wrong passcode a few times should force you to enter the password but it doesnt. The passcode should also be more than 4 digits. Also, in order to use touchid, passcode must be enabled. Should be able to use touchid without passcode enabled.
Mighty43 about
Discover Mobile, v7.2.0