Is 3600 for the access_token not a bit long?