auth cache is no aware of token expiration date