tokens that auto-expire after a set amount of time
let the user/token-maker set the duration?