Remove expires_at and clean up naming

The only functional change is removing `expires_at` for the tokenization responses.