the raw audacity of a “keep me signed in” checkbox when you know that token only lasts 24 hours