Add expiration time for refresh tokens
Old refresh tokens haven't been deleted, which lead to the point that old refresh tokens haven't been deleted so far. See https://django-oauth-toolkit.readthedocs.io/en/latest/management_commands.html#createapplication