Lower the TTL of JWT tokens
See https://github.com/dolfinus/arkenston-backend/blob/master/config/config.exs#L69-L73
The JWT’s expiration duration should be set to something short (5-10 minutes) and the refresh token should be set to something long (2 weeks or 2 months).