In general, a lot of services have absurdly tight time requirements on email validation. A lot of users have graymail setups or other things that will delay things.

I get expiring an email, on the general principle of not leaving credentials lying around, but use 24 hours or something, not minutes.