correcting endpoint for extending short-lived access tokens #127