Files
core/auth

Based on

token is valid for one day, user can choose to logout, logout is revoke token