This does sound perfect to me. However I worry about losing a token without a established way to replace it. For me I don't like staying logged into most servi

This does sound perfect to me. However I worry about losing a token without a established way to replace it. For me I don't like staying logged into most services, I find it very uncomfortable that my computer "remembers" me for some reason. I use a browser plugin to delete cookies on tab close and don't save any history. I'm not so much RMS, just like my browser to "start fresh" most of the time. I also use a VPN 90% of the time. So I value quick login more than account security, I guess.