Changed default expiry to 1 day (from 365 days).

This should not negatively affect user experience, as users are *extremely* unlikely to make a GET request, and then a subsequent POST request > 1 day later (without making another GET request first).

I'd be happy to bump this up to 7 or 14 days if you have a strong preference for it.