Right now auth sessions never expire, and also have the same token every time. Both of those are bad things probably.
Right now auth sessions never expire, and also have the same token every time. Both of those are bad things probably.