I kept on getting 401 unauthorised because i thought my expiry was in seconds(3600) but it was 3600 ms - by the time i tested in postman, it already expired.