Make it look like the TouchID isn't working and switch to password mode, boom. User password obtained