[hagreet]

I think the most important point is, that this solution requires a way to securely transmit the generated link. As described in another comment by @ryandvm this has two advantages over transmitting the password directly: 1. It won't show up in logs or be otherwise accidentally stored. 2. If the link expires after a single use you get security in the covert model. However, this comes with problems because some tools like virus scanners automatically hit links.

[pinehqcom]

Exactly exactly. I made sure to be resilient to Google bots/Virus Scanners by doing some fancy javascript tricks