Why does ensure_authenticated check users_tokens on every navigate?

Yes, only with a patch it isn’t. Navigating in a live_session means the websocket isn’t closed and reestablished.