Authentication token could have unlimited validity