added longer token timeout - 5 years