I see that user->token() has a default value.. so rather than defaulting it to 86400, maybe it should be sufficient to make duration optional for this function.