I'd guess you'd then also want to return a timestamp in the response and then fail if the timestamp is older than x minutes too