Required for #2 Implement the LoginToken model and have a mechanism to delete expired entries (even a manual script is fine for now)