Customize token flow OAuth expirations with a config lambda