Make the access and refresh token duration configurable

[alberto234]

Currently the refresh and access token duration are hardcoded in the Constants.php file. Make this configurable such that it can be edited by the user in the config.yml file.