Add config for refresh_token TTL