bumped JWT expiration up to 30 minutes