When used on publicly visible pages, there's no need for login token.
For private pages, the user would have to provide a new login token when it expired.
It only happened once in several months for me.
I'm hoping that my library will become obsolete when they have an official API.
I talked with them and gave them my wishlist for what capabilities the official API should have.