def self.login(user)
    token = Broadsheet::Token.create(owner: user,
                                     type: 'one_time_login_token',
                                     unguessable: SecureRandom.hex(32),
                                     expires_at: DateTime.now + 1.day)