SignIn: expiration set to 90 days