use new config structure
add token expiration time to config