[pas]

That stored token is the same as a long lived session cookie, providing the same level of security.