the documentation is clear that these tokens last 30 minutes. That said, it'd be nice to check for expiration without relying on constants.