check more on expire_after
Merge remote-tracking branch 'upstream/fqj1994-master'
save token
fix load token bug
rename is_authed to a private method