[lightedman]

Why are you not revoking tokens after session end across the board? Token re-use is one of the faster-rising security breach factors now days.