correct endpoint for extending short-lived access token

this is for my personal temporary use
i cannot wait until the real test have been written