//good thing this is a fallback to token. magic links won't invalidate remember me :)