Session token lifetime configuration