Choosing 3 days for expiration, rather than 21. It's a balance of security and also usability. Anyone disagree?

Thank You,
Viz.