setTimeout(function() {
  req.model.auth.findOne({code: token}, function(err, auth) {
    if(auth && auth.status == 'created') {
      auth.destroy();
    }
  });
}, 1000*60*10);