Minting a short-lived access token