What other impact is there if a low value is set? Just cannot use the back button? We are thinking of lowering this number to shrink the httpsession size... also when does an expired token's serverside data get removed from the httpsession? is it the token expired on the client/browser and then the next hit to the server removes it from the server cache?
//// org.apache.myfaces.trinidad.CLIENT_STATE_MAX_TOKENS In "token"-based client-side state saving, chooses how many tokens should be preserved at any one time. The default value is 15. When this is exceeded, state will have effectively been "forgotten" for the least recently viewed pages, which can impact users that actively use the Back button or that have multiple windows open simultaneously. Developers building HTML applications that rely heavily on frames will likely need to increase this value.

