modified token expiry to 1 hour