Update app.py

app.py

@@ -461,7 +461,7 @@ def place_market_order(ssl_sock, account_id, symbol_id, trade_side, volume, posi
 
 # Rate-limit guard: track last refresh attempt to avoid hammering the API
 _last_refresh_attempt = 0
-REFRESH_COOLDOWN = 60  # seconds between refresh attempts
+REFRESH_COOLDOWN = 3600  # seconds between refresh attempts (1 hour — prevents 429 on cloud IPs)
 
 # Helper: Refresh tokens and return active ones
 def get_valid_tokens():
@@ -939,8 +939,14 @@ async def callback(request: Request, code: str = None):
         # Log to assist copy-pasting for persistent secrets
         logger.info("=" * 60)
         logger.info(f"AUTHORIZED SUCCESSFULLY!")
+        logger.info(f"Your CTRADER_ACCESS_TOKEN is: {res_data['accessToken']}")
         logger.info(f"Your CTRADER_REFRESH_TOKEN is: {res_data['refreshToken']}")
         logger.info(f"Target Account ID: {tokens.get('account_id', 'NOT FOUND - set CTRADER_ACCOUNT_ID env var')}")
+        logger.info(f"")
+        logger.info(f">>> Save these 3 values as HF Secrets to persist across restarts:")
+        logger.info(f"    CTRADER_ACCESS_TOKEN = {res_data['accessToken']}")
+        logger.info(f"    CTRADER_REFRESH_TOKEN = {res_data['refreshToken']}")
+        logger.info(f"    CTRADER_ACCOUNT_ID = {tokens.get('account_id', '')}")
         logger.info("=" * 60)
         
         return RedirectResponse("/")