They should not have to log in every time, only when their token has expired
They should not have to log in every time, only when their token has expired