Access token expires after 30 minutes since creation

The access token should expire after the given period of inactivity (by default 30 minutes). What happens in the system at the moment is that the token expires exactly after 30 minutes since it was generated.

Repro steps:
1. Generate a token
2. Keep playing with the system for 30 minutes
3. Your token becomes invalid and you need to re-authenticate

Acceptance criteria:

• Access token only expires when I manually destroy it (log out) or I've not been using it for 30 minutes.