Fix token validation to account for UTC timezone.