That token itself is still valid - regardless of whether or not their browser still has it stored.