I'm learning OAuth2 via this [tutorial](http://www.asp.net/aspnet/overview/owin-and-katana/owin-oauth-20-authorization-server), then I found refresh token's expire time is the same as access token, is this correct?