added configurable token expiration because harness CRS needs it...