Hi,
1. Tokens are valid during 3 months, but if the user is offline it should be valid until it reconnects and is asked again to enter his credentials.
2. Tokens
3. You can modify login/token.php (the 3 months value is hardcoded there)
If they access and download the scorms for offline usage, they should be fine and able to play them offline.
Regards, Juan