Fixed forms token expiration in REST authentication.
Comments added.