Increase Refresh Token / Access Token Lifetime

[robertlong]

We should increase the refresh token and access token lifetime such that the average user isn't signed out between sessions. Unless they are away for a while without accessing Third Room, they should stay signed in.