Add support for long-live token

This PR adds support for long-lived token for access and refresh token, by allowing expiresAt to be null. This is often needed for API that delivers an access token that is used to perform API calls, and where this key must not expire.