Comment by shanecleveland

If someone gets a hold of your email, they could easily request another login token anyway. I think it's fine if it doesn't expire.