refactor(backend): token generation works again, need timeelapsed per route