b-50303 added -token-expiration-in-header