We don't issue two types of access tokens - just one, which is meant to use for session management, and you can configure that token's lifetime