Refactored how expires_in is returned to clients, it now represents the token TTL from the time the response is sent