This allows a client to login only once a day.

We might want to decrease that and look into refresh token.
But this looks overkill for our use case.