login link valid 10 minutes