Auth Tokens aren't getting invalidated
The player used auth token should get a TTL on disconnect so they will get cleared up as soon as the player doesn't reconnected in the expected time frame
The player used auth token should get a TTL on disconnect so they will get cleared up as soon as the player doesn't reconnected in the expected time frame