24h validity is only for the reset password