Grammar fix on README.md

README.md

@@ -11,7 +11,7 @@ Checklist of the most important security countermeasures when designing, testing
 ### JWT (JSON Web Token)
 - [ ] Use random complicated key (`JWT Secret`) to make brute forcing token very hard.
 - [ ] Don't extract the algorithm from the payload. Force algorithm in the backend (`HS256` or `RS256`). 
-- [ ] Make token expiration (`TTL`, `RTTL`) short as possible.
+- [ ] Make token expiration (`TTL`, `RTTL`) as short as possible.
 - [ ] Don't store sensitive data in the JWT payload, it can be decoded [easily](https://jwt.io/#debugger-io).
 
 ### OAuth