Added ability to not require token for a user if they have logged in recently