But what about when they come from another browser or on mobile?
Most people will check their email from their mobile devices. Could be a different browser than where they started, so now they have no easy way of removing the alert, (unless we generate new codes for that in every email?)