I have enabled 2-factor authentication in my web app using GIP. Is there a default time for which the sms token will be valid ? I tried finding that in documentation but did