v1.9.1

Changed

• Refresh tokens now last 30 days (was 24 hours). A connected client
  re-authorizes far less often — only after 30 days of inactivity, since
  every refresh rotates the token and resets the clock. Access tokens stay
  short-lived at 1 hour.