Leveraging Microsoft Entra ID (Azure AD) to counter Token Theft