To be fair, we ARE dealing with a state machine.
Fixed a bug where tokens and expirations were being assigned by reference rather than copied when constructing ExpiredTokens.