>i always thought we should just email the user a link if their session has expired. there's no reason to have passwords. Yes! You are so right. What have I

>i always thought we should just email the user a link if their session has expired. there's no reason to have passwords. Yes! You are so right. What have I been thinking. This is an excellent and care-free way to do it. I didn't even consider persisting e-mail tokens, but that makes so much sense! Thanks!