changed token expiration to 1 min