Make token lifespan configurable

It would be nice to be able to configure the lifespan of a token. At the moment it is valid 24 hours, but when the token is sent as part of an invitation for new customers, they do not always react promptly within the validity period.