The expiration length of the token is completely controlled by the Session Length setting inside the Global Configuration area. If it's set to "15", then a user has 15 minutes to complete a form on your site. Each time a user interacts with your site, their session is reset, and another 15 minutes could pass before they are auto-logged out or their token expires.
Alex