use utc for jwt expiration