Determine token-timeout

[jaylenw]

Determine the duration that we will allow for a user's session token to be active for. Currently, the duration of the session is set for no expiration.

[nguym077]

I have determined it to be 15 minutes.

[narithchoeun]

15-20 minute sessions seem like a good amount

[jaylenw]

I am thinking 15-20min may be too short of a duration. Let's say a user is filling out an application and takes them 30mins, then they would lose their data on submission and have to log back in. Perhaps something around 2hrs of inactivity?