* changes: Do not run face auth if keyguard is already authenticated with face. Do not make device is asleep a gating condition for face auth