Terminology question: I tend to think of tokens as temporary, limited credentials (like what Devise generates and puts in an email when you want to change your password) whereas this would be more of a key. Super minor, I know, just curious if others agree (that it's even worth debating). :)