on server, augment default token lifetime and add settings in .env to control it. Add the refresh endpoint
root = true
[*]
charset = utf-8
indent_style = space
indent_size = 4
end_of_line = lf
insert_final_newline = true
trim_trailing_whitespace = true
[*.js]
indent_style = space
indent_size = 2