Token Authentication for RESTful API: should the token be periodically changed? Token Authentication for RESTful API: should the token be periodically changed? django django