According to the note in
Step 4 of the OAuth documentation, API tokens expire after 1 year. However,
according to the FAQ API tokens only expire when the merchant uninstalls the app.
Which is correct?