I've made a small config change that means you should now not be asked to refresh your password unless you've been inactive for a "proper" hour. Previously it was "up to an hour", but could be as little as half an hour sometimes.

Hopefully this makes it a bit more predictable, and that you're asked to refresh the password less often!

Thanks

Joe