patch: set expiration period to 1 hour for token