fixed 'issued' field format, removed 'identity' from renewal token result