get resets expire to 24h. uid can be anything > 6 chars