Fine-grained token handling for different token types

[kubasaw]

Currently, the system does not differentiate between the expiration times of access_token, id_token(non-JWT, 8h), cognito_token (JWT 4h) and iot_token (JWT 4h). We should implement fine-grained token handling where each token type is managed individually according to its expiration time.