title: Sliding expiration for access token with Loopback
body: <p>I've installed <a href="https://loopback.io/" rel="nofollow noreferrer">Loopback</a> and enabled <a href="https://loopback.io/doc/en/lb2/Controlling-data-access.html" rel="nofollow noreferrer">ACL</a> for a couple of models. I noticed that the <strong>Access Token</strong> is valid for ever, I would like to change this period somehow to, for example, an hour. But even better would be to reset this period when activity occurs (sliding expiration)</p>
  
  <p>I've checked the <a href="https://loopback.io/doc/en/lb3/index.html" rel="nofollow noreferrer">documentation</a> but couldn't fine anything about this subject. Any help/guidance would be appreciated!</p>