api: increase lifetime of login tokens until expiration