when renewing session tokens, use current configured duration