For a lost password, or if the form above is broken. A token session reaches only what that token names.