Sliding refresh token expiration configurable per Application