Update default HMAC token duration to 30 minutes
Update documentation about rundeck.security.apiCookieAccess.enabled